← Back to home

Privacy Policy

Last updated: 26 October 2026

This policy explains how Ever After Invite (Jakarta, Indonesia) processes personal data when providing invitation and RSVP services on WhatsApp, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

  1. 1. Our role

    The event host (our client) decides who is invited and gives us the guest data. For guest data, the client is the data controller and we process it on the client's behalf.

    For our clients' own data (such as the host's name and contact details), we are the data controller.

  2. 2. Data we process

    • Guest data from the host: name, WhatsApp number, group (e.g. family or office), maximum number of people, and table number if any.
    • RSVP answers: attendance, number of people attending, and any message or wishes the guest writes.
    • WhatsApp messages between guests and our service, with their delivery status.
    • Host data: name, contact details and event details.
    • Technical server records, such as IP addresses, for security (e.g. to stop suspicious login attempts).

  3. 3. What the data is used for

    • Sending invitations, RSVP questions, table numbers and event reminders to guests.
    • Preparing the attendance summary for the host.
    • Answering questions from guests and hosts.
    • Keeping the service secure.

    We don't sell personal data and don't use it for advertising or for other events.

  4. 4. Other parties involved

    • Meta Platforms (WhatsApp Business Platform), to send and receive WhatsApp messages.
    • Our server provider (DigitalOcean, data center in Singapore), where the service and data are stored.
    • Encrypted backup storage (Google Drive), to restore data after a failure.

    Data may therefore be processed outside Indonesia, with equivalent protection as required by the Personal Data Protection Law.

  5. 5. How long data is kept

    Events are archived 7 days after the event date. Guest data is kept for at most 1 year, then anonymized (only totals remain) or deleted. Encrypted backups are kept for at most 30 days.

  6. 6. Security

    Data is stored on a server with restricted access, sent over encrypted connections (HTTPS), and the admin pages are password-protected with a limit on login attempts. Backups are encrypted before they're stored.

  7. 7. Your rights

    You can ask to access, correct or delete your data, or ask us to stop sending you messages. Guests can contact the event host or us directly; we'll follow up together with the host.

  8. 8. This website

    This site uses no tracking or advertising cookies. The admin pages use cookies that are needed for signing in and the language choice.

  9. 9. Changes and contact

    This policy may be updated; the date above shows the last change. Questions or requests about personal data: [email protected].